← Back to Skills Marketplace
2118
Downloads
1
Stars
0
Active Installs
6
Versions
Install in OpenClaw
/install moltpho
Description
Shop autonomously on Amazon via Moltpho - search products, manage credit, and purchase items using mUSD on Base mainnet
Usage Guidance
Key things to consider before installing: (1) This skill can autonomously detect 'need' signals in conversations and place real orders—if you enable it, set confirmation_required in the portal or disable proactive/autonomous purchasing to avoid unexpected charges. (2) It will create and store API credentials and secrets on disk (~/.config/moltpho/credentials.json or %APPDATA%); treat those like sensitive keys and verify the service (api.moltpho.com / portal.moltpho.com) is legitimate before saving secrets. (3) The package includes Python code and requirements.txt but no install instructions — confirm how dependencies (requests) will be provided or run it in a sandbox/isolated environment. (4) There's a minor mismatch: the SKILL.md references MOLTPHO_CREDENTIALS_PATH but the skill metadata lists no env vars — expect possible configuration surprises. (5) The skill source/owner is unknown; verify the publisher and, if possible, audit the code (especially bootstrap, credential storage, and the proactive purchase logic) and restrict per-order/daily caps in the portal before enabling autonomous behavior.
Capability Analysis
Type: OpenClaw Skill
Name: moltpho
Version: 0.1.5
The OpenClaw AgentSkills skill bundle for Moltpho is classified as benign. The skill's purpose is autonomous shopping on Amazon via the Moltpho platform, which involves credential management, product search, and purchasing. All network communication is directed to a single, hardcoded domain (api.moltpho.com). Sensitive credentials are saved locally with appropriate `chmod 600` permissions. The `SKILL.md` and `lib/proactive.py` detail a robust proactive purchasing logic with multiple safeguards, including price caps, system blocklists, and confidence thresholds, which aligns with the stated purpose and does not indicate malicious prompt injection against the analyzing agent. No evidence of data exfiltration, malicious execution, persistence, or obfuscation was found across the files.
Capability Assessment
Purpose & Capability
The stated purpose (autonomous shopping on Amazon using mUSD) matches the code and API endpoints (catalog search, quotes, x402 signing, orders). Storing agent credentials and performing on-chain payment signing is consistent with that purpose. Minor inconsistency: SKILL.md references an optional environment override (MOLTPHO_CREDENTIALS_PATH) but the skill metadata lists no required env vars.
Instruction Scope
Runtime instructions ask the agent to register, read/write a credentials file in the user's home/appdata, auto-open a browser, and run a proactive_monitoring loop that passively watches conversations for 'need' signals and may autonomously create quotes and place orders. Passive monitoring + automatic purchase flows are scope-expansive and can lead to unexpected charges if owner confirmation or portal settings are not strictly enforced. SKILL.md also relies on reading/writing local credential files and optionally pulling an 'openclaw_instance_id' without documenting its source.
Install Mechanism
This is listed as an instruction-only skill but includes Python code and a requirements.txt (requests>=2.28.0) with no install spec. That mismatch means the runtime environment may lack declared dependencies or installation steps, causing failures or unexpected behavior. Because there is no install hook, it's unclear how/when dependencies will be installed.
Credentials
The skill does not declare required environment variables yet the SKILL.md documents an override variable (MOLTPHO_CREDENTIALS_PATH). The skill stores API key secrets and wallet addresses to disk (~/.config/moltpho/credentials.json or %APPDATA% path) and will save an api_key_secret shown once by the service — storing such secrets locally is expected for this purpose but is sensitive and should be highlighted to owners. No other unrelated credentials are requested, which is appropriate.
Persistence & Privilege
always:false (good), but the skill is allowed to be invoked autonomously (platform default) and explicitly implements proactive/autonomous purchasing. That combination increases blast radius (ability to create real orders and spend credit) even without 'always: true'. There is no evidence it tries to modify other skills or global settings.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install moltpho - After installation, invoke the skill by name or use
/moltpho - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.5
More API fixes
v0.1.4
Better error handling in moltpho.py
v0.1.3
Comprehensive API updates
v0.1.2
No user-facing changes in this release; no file changes detected.
v0.1.1
- Initial release of the Moltpho skill.
- Shop autonomously on Amazon using mUSD credit on Base mainnet.
- Features agent registration, product search, and purchasing via x402 protocol.
- Includes proactive purchase monitoring, credit balance checks, and support ticket creation.
- Credential management and shipping profile collection supported.
- Added .DS_Store file.
v0.1.0
Initial public release of moltpho autonomous Amazon shopping skill.
- Enables agents to register and manage credentials for shopping.
- Supports product search, credit monitoring, and purchasing via mUSD on Base mainnet.
- Integrates with Amazon through the Moltpho backend, including x402 payment protocol.
- Handles shipping profile management, both interactively and via portal.
- Implements proactive purchase detection from conversation with configurable logic.
- Provides support functions, such as budget checks and support ticket creation.
Metadata
Frequently Asked Questions
What is Moltpho?
Shop autonomously on Amazon via Moltpho - search products, manage credit, and purchase items using mUSD on Base mainnet. It is an AI Agent Skill for Claude Code / OpenClaw, with 2118 downloads so far.
How do I install Moltpho?
Run "/install moltpho" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Moltpho free?
Yes, Moltpho is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Moltpho support?
Moltpho is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Moltpho?
It is built and maintained by unifiedh (@unifiedh); the current version is v0.1.5.
More Skills